CVE-2022-38890

CVE-2022-38890 affects Nginx NJS 0.7.7. A segmentation violation is triggered by the njs_utf8_next function in src/njs_utf8.h. Public sources consistently describe the vulnerability as a segmentation fault in NJS, with NVD citing a CVSS v3.1 base score of 5.5 (Medium) and local attack vector, req...

RHEL 7 : RHV-H security update (redhat-virtualization-host) 4.3.18 (Important) (RHSA-2021:3477)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3477 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host...

h.20-bal.com Cross Site Scripting vulnerability OBB-2881109

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Debian dla-3084 : libndpi-bin - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3084 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3084-1 [email protected]...

CVE-2022-37092

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById...

CVE-2022-36515

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function addactionlist...

H3C H200 缓冲区错误漏洞

The H3C H200 is a type of full gigabit home smart hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version that stems from a stack overflow in the UpdateIpv6Params method...

H3C H200 缓冲区错误漏洞

H3C H200 is a kind of full Gigabit Home Smart Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the UpdateMacClone method...

Upgraded Q -> H from 210 [1660349369322]

Judge has assessed an item in Issue 210 as High risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

PT-2022-23767 · Zimbra · Zimbra Collaboration Suite

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration Suite versions 8.8.15 Description: The issue concerns a reflected XSS in the /h/search?action API endpoint, which accepts parameters called extra, title, and onload that are partially sanitized. This allows for the...

h-tuning.de Cross Site Scripting vulnerability OBB-2811326

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-34028

Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...

CVE-2022-34028

CVE-2022-34028 affects Nginx NJS 0.7.5. The vulnerability is a segmentation fault triggered by njs_utf8_next in src/njs_utf8.h, as described in connected records. The NVD entry links a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, no privileges, no user interaction, and availabil...

CVE-2022-27937

Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264...

CVE-2022-27936

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323...

Design/Logic Flaw

Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264...

Design/Logic Flaw

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323...

CVE-2022-27937

CVE-2022-27937 affects Pexip Infinity prior to version 27.3. The vulnerability allows remote attackers to trigger excessive resource consumption via H.264, leading to denial of service (availability impact). The issue is mitigated by upgrading to version 27.3 or later as indicated in security adv...

CVE-2022-27937

Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264...

CVE-2022-27936

Summary: CVE-2022-27936 affects Pexip Infinity prior to 27.3, where remote attackers can trigger a software abort via H.323, effectively a denial of service. Affected versions: before 27.3. Impact: remote, unauthenticated trigger leading to a crash (DoS). Remediation: upgrade to version 27.3 or l...